Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3131392e31382e3135322e302f32312d3234203d3e203535363835.roa
File:                     3131392e31382e3135322e302f32312d3234203d3e203535363835.roa (raw, json)
Hash identifier:          hQjgg+sWPS/N5kd2BHYD6meYGoAOIdtzDi11Pom+Bis=
Subject key identifier:   EF:5F:CC:CE:C8:15:76:6E:B0:92:70:43:E7:95:68:4A:C6:B8:16:CC
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       1E2098CF12104693D249D8709C218301CC9819E9
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3131392e31382e3135322e302f32312d3234203d3e203535363835.roa
Signing time:             Mon 31 Jul 2023 00:13:04 +0000
ROA not before:           Mon 31 Jul 2023 00:08:04 +0000
ROA not after:            Mon 29 Jul 2024 00:13:04 +0000
asID:                     55685
IP address blocks:        119.18.152.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 13:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:20:98:cf:12:10:46:93:d2:49:d8:70:9c:21:83:01:cc:98:19:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Jul 31 00:08:04 2023 GMT
            Not After : Jul 29 00:13:04 2024 GMT
        Subject: CN=EF5FCCCEC815766EB0927043E795684AC6B816CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:3d:05:c1:88:f7:ba:1f:37:3f:61:a4:6f:
                    b0:5f:53:52:ff:e0:bb:bb:3f:49:e0:53:04:e8:e3:
                    e4:25:80:21:81:19:c2:19:cc:d7:e9:06:54:51:ab:
                    97:fc:a7:e8:d4:7c:4a:f6:51:1f:b4:b8:c9:af:39:
                    cc:7a:91:7a:57:89:0a:33:d1:34:68:f9:4b:02:81:
                    f7:0a:12:1d:bd:cf:fe:1c:49:d5:16:4e:df:32:9f:
                    23:b3:3c:ef:8b:88:71:13:b4:e9:14:dc:c9:e5:71:
                    e5:b3:4a:fd:e9:36:3f:be:a6:96:1d:a0:89:09:ec:
                    47:47:1c:00:0d:4e:73:80:da:72:c5:5b:b2:bf:da:
                    97:2d:a6:04:20:8e:76:a8:31:81:e6:61:29:06:64:
                    25:f1:dd:ed:68:f1:a9:bc:5d:5e:f9:da:2b:bd:20:
                    3a:70:e1:0c:8f:a4:a3:ee:9e:02:68:36:56:71:82:
                    38:04:8e:fd:c9:17:f9:ed:db:ea:10:2a:4b:b4:1e:
                    5d:1b:47:8b:f2:9d:e8:08:4c:69:5c:a3:1a:c5:6b:
                    da:32:d5:19:da:51:94:93:41:10:4d:ae:01:7d:e0:
                    a1:da:ba:52:a5:bc:62:cb:02:cd:45:e4:ce:b2:96:
                    ce:a4:f9:9d:e4:8f:61:d4:80:6c:4e:66:13:c1:16:
                    89:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5F:CC:CE:C8:15:76:6E:B0:92:70:43:E7:95:68:4A:C6:B8:16:CC
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3131392e31382e3135322e302f32312d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.18.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         19:e2:af:ca:0e:a6:bb:90:7e:de:83:c0:9a:5e:a7:84:de:3d:
         aa:c8:f8:02:36:e6:dc:72:33:cc:7d:38:25:28:af:b5:82:1e:
         fd:2a:62:a7:57:45:4e:3a:43:83:0d:b8:9a:43:5c:bb:13:33:
         fe:78:95:0b:cb:00:2b:12:a8:b9:f6:07:41:a9:d9:ac:6d:81:
         17:95:14:79:78:26:b0:98:98:d4:2f:d6:33:fd:c8:4e:95:40:
         c6:d8:d9:1d:be:79:2a:df:e7:94:ed:1a:6e:92:85:45:1c:9f:
         a1:25:36:86:8b:56:56:c9:32:28:8b:ea:17:e5:87:89:a7:61:
         00:a6:35:0d:65:8c:4d:4f:b9:74:2f:03:6f:34:0d:3f:2a:16:
         b9:8d:5c:fe:48:3c:52:d2:17:4f:ba:b1:61:a9:de:bf:be:51:
         ff:0e:df:10:9f:60:ce:53:f3:56:43:fe:a7:63:02:c9:8a:b6:
         fb:20:04:9d:5f:6d:c6:5c:51:cb:ce:a9:50:d7:f4:be:32:48:
         5e:59:af:c0:07:26:52:9c:4d:4e:9c:8d:17:85:10:40:f9:1c:
         e9:5d:83:fb:97:28:0c:ee:6e:ea:90:ff:f6:16:9b:2f:3d:18:
         16:ce:e0:19:ee:7a:b9:ea:5d:60:6d:9f:b7:bb:98:56:69:92:
         80:7e:ce:2f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHiCYzxIQRpPSSdhwnCGDAcyYGekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4
MTFBNzA0RDAeFw0yMzA3MzEwMDA4MDRaFw0yNDA3MjkwMDEzMDRaMDMxMTAvBgNV
BAMTKEVGNUZDQ0NFQzgxNTc2NkVCMDkyNzA0M0U3OTU2ODRBQzZCODE2Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAIz0FwYj3uh83P2Gkb7BfU1L/
4Lu7P0ngUwTo4+QlgCGBGcIZzNfpBlRRq5f8p+jUfEr2UR+0uMmvOcx6kXpXiQoz
0TRo+UsCgfcKEh29z/4cSdUWTt8ynyOzPO+LiHETtOkU3MnlceWzSv3pNj++ppYd
oIkJ7EdHHAANTnOA2nLFW7K/2pctpgQgjnaoMYHmYSkGZCXx3e1o8am8XV752iu9
IDpw4QyPpKPungJoNlZxgjgEjv3JF/nt2+oQKku0Hl0bR4vynegITGlcoxrFa9oy
1RnaUZSTQRBNrgF94KHaulKlvGLLAs1F5M6yls6k+Z3kj2HUgGxOZhPBFokXAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU71/MzsgVdm6wknBD55VoSsa4FswwHwYDVR0j
BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw
RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB
NzA0RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04
ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMxMzEzOTJlMzEzODJlMzEzNTMyMmUzMDJmMzIz
MTJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3cSmDANBgkqhkiG
9w0BAQsFAAOCAQEAGeKvyg6mu5B+3oPAml6nhN49qsj4Ajbm3HIzzH04JSivtYIe
/Spip1dFTjpDgw24mkNcuxMz/niVC8sAKxKoufYHQanZrG2BF5UUeXgmsJiY1C/W
M/3ITpVAxtjZHb55Kt/nlO0abpKFRRyfoSU2hotWVskyKIvqF+WHiadhAKY1DWWM
TU+5dC8DbzQNPyoWuY1c/kg8UtIXT7qxYanev75R/w7fEJ9gzlPzVkP+p2MCyYq2
+yAEnV9txlxRy86pUNf0vjJIXlmvwAcmUpxNTpyNF4UQQPkc6V2D+5coDO5u6pD/
9habLz0YFs7gGe56uepdYG2ft7uYVmmSgH7OLw==
-----END CERTIFICATE-----
Generated at Thu Apr 25 14:06:03 2024 by rpki-client on console-ams.rpki-client.org